Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2020-07-22 CVE-2020-6512 Type Confusion vulnerability in multiple products
Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google debian opensuse fedoraproject CWE-843
8.8
2020-07-22 CVE-2020-6510 Out-of-bounds Write vulnerability in multiple products
Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
local
low complexity
google debian opensuse fedoraproject CWE-787
7.8
2020-07-22 CVE-2020-6507 Out-of-bounds Write vulnerability in Google Chrome
Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8
2020-07-17 CVE-2020-0228 Unspecified vulnerability in Google Android
There is an improper configuration of recorder related service.
network
low complexity
google
7.5
2020-07-17 CVE-2020-0227 Missing Authorization vulnerability in Google Android
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check.
local
low complexity
google CWE-862
7.8
2020-07-17 CVE-2020-0226 Type Confusion vulnerability in Google Android 10.0
In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion.
local
low complexity
google CWE-843
7.8
2020-07-17 CVE-2020-0120 Out-of-bounds Write vulnerability in Google Android 10.0
In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow.
local
low complexity
google CWE-787
7.8
2020-07-07 CVE-2020-15579 Unspecified vulnerability in Google Android
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
network
low complexity
google
7.5
2020-06-22 CVE-2020-8933 Incorrect Default Permissions vulnerability in multiple products
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root.
local
low complexity
google opensuse CWE-276
7.8
2020-06-22 CVE-2020-8907 Incorrect Default Permissions vulnerability in multiple products
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root.
local
low complexity
google opensuse CWE-276
7.8